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CLAIM AMENDMENTS 

1 . (Currently Amended) A method to monitor for monitoring a networ k by a network monitor , 
comprising: 

routing data pack e ts through a rout e r; 

generating receiving data packet flow records for at l e ast som e of said data packets from at least 
one network router ; 

filtering said at least som e of th e flow records; 

extracting packet information from the said filtered flow records, wherein the said extracted 
packet information comprises int e rn e t information of at least one target of interest; and 

performing active measurements te of said at least one target of interest using th e based on said 
extracted packet information. 

2. (Currently Amended) The method according to claim 1, said filtering-step comprising^ 
selecting flow records based on an address field of packet routing information in said received flow 
records. 

3. (Currently Amended) The method according to claim 2, said filtering step comprising 
selecting flow records having non-local destination or source addresses of non local hosts . 

4. (Currently Amended) The method according to claim 2, said filtering step comprising 
selecting data pack e ts flow records having local destination or source addresses of local hosts . 

5. (Currently Amended) The method according to claim 2, said filtering-step comprising 
selecting flow records having destination or source addresses containing associated with performing 
critical services bas e d on tho addr e ss field or a port fi e ld of th e flow r e cords . 

6. (Currently Amended) The method according to claim 1, said filtering step comprising 
randomly selecting data pack e ts flow records from said filt e r e d data packets received flow records . 

7. (Currently Amended) The method according to claim 1, wherein said performance of active 
measurements comprises a ping process. 

8. (Currently Amended) The method according to claim 1, wherein said performance of active 
measurements comprises a traceroute process. 
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9. (Currently Amended) The method according to claim 1, wh e r e in further comprising selecting 
the nature of said active measurements are s e l e ct e d based on said at least one target of interest. 

10. (Currently Amended) Ah network monitoring apparatus for monitoring a n e twork , 
comprising: 

a rout e r for routing data packets, wher e in said rout e r gen e rates flow records for at l e ast some of 
said data pack e ts; and 

a monitor configured for receiving the data packet flow records from at least one network router , 
wherein said monitor filt e rs for filtering said flow records, and further wherein said monitor e xtracts for 
extracting packet information from said filtered flow records, the said extracted packet information 
comprising int e rn e t information of at least one target of interest, wherein said monitor performs and for 
performing active measurements te of said target of interest using th e based on said extracted packet 
information. 

11. (Currently Amended) The apparatus according to claim 10, wherein said monitor filt e rs is 
configured to filter said flow records based on an address field of e ach packet routing information in 
said flow records. 

12. (Currently Amended) The apparatus according to claim 11, wherein said monitor s e l e cts is 
configured for selecting flow records having non-local destination or source addresses of non local 
hosts . 

13. (Currently Amended) The apparatus according to claim 11, wherein said monitor s e l e cts is 
configured for selecting flow records having local destination or source addresses of local hosts . 

14. (Currently Amended) The apparatus according to claim 1 1, wherein said monitor selects 
data packets for is configured for selecting flow records having destination or source addresses 
associated with performing critical services. 

15. (Currently Amended) The apparatus according to claim 10, wherein said monitor is 
configured for randomly s e l e cts selecting flow records from fee said received flow record s receiv e d by 
said monitor . 

16. (Currently Amended) The apparatus according to claim 10, wherein said performance of 
active measurements comprises a ping process 
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17. (Currently Amended) The apparatus according to claim 10, wherein said performance of 
active measurements comprises a traceroute process. 

18. (Currently Amended) The apparatus according to claim 10, wherein said monitor is 
configured for selecting the nature of said active measurements ar e s elect e d based on said at least one 
target of interest. 

19. (Currently Amended) A method to monitor for monitoring a networ k by a n e twork monitor , 
comprising: 

routing data pack e ts through a router; 

gen e rating receiving data packet flow records for at l e ast a fraction of said data pack e ts from at 
least one network router ; 

extracting packet information from at least a fraction of said received flow records, wherein the 
said extracted packet information comprises int e rn e t information of at least one target of interest; and 

performing active measurements te of said at least one target of interest using th e based on said 
extracted packet information. 

20-25 (Cancelled) 

26. (Currently Amended) The method according to claim 19, wherein said performance of 
active measurements comprises a ping process. 

27. (Currently Amended) The method according to claim 19, wherein said performance of 
active measurements comprises a traceroute process. 

28. (Newly Added) A network monitoring apparatus, comprising a monitor configured for 
performing the method of claim 19. 

29. (Newly Added) The method of claim 1, further comprising: 
routing said data packets through said at least one router; and 
generating said data packet flow records. 

30. (Newly Added) The apparatus of claim 10, further comprising said at least one router 
configured for routing said data packets and generating said data packet flow records. 

31. (Newly Added) The method of claim 19, further comprising: 
routing said data packets through said at least one router; and 
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generating said data packet flow records. 

32. (Newly Added) The apparatus of claim 28, further comprising said at least one router 
configured for routing said data packets and generating said data packet flow records. 
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